Bug 1356932 – the "ldap ssl" description for smb.conf is incorrectly defined

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1356932 - the "ldap ssl" description for smb.conf is incorrectly defined

Summary:	the "ldap ssl" description for smb.conf is incorrectly defined

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	samba (Show other bugs)
Sub Component:
Version:	7.4
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	rc
Target Release:	7.4
Assigned To:	Andreas Schneider
QA Contact:	Robin Hack
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2016-07-15 06:05 EDT by Ming Davies
Modified:	2017-08-01 14:19 EDT (History)
CC List:	7 users (show)

See Also:
Fixed In Version:	samba-4.6.0-0.1.rc3.el7
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2017-08-01 14:19:59 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Samba Project	12023	None	None	None	2016-07-15 06:20 EDT
Red Hat Product Errata	RHSA-2017:1950	normal	SHIPPED_LIVE	Low: samba security, bug fix, and enhancement update	2017-08-01 14:09:24 EDT

Groups: None (edit)

Description Ming Davies 2016-07-15 06:05:38 EDT

Description of problem:

The "ldap ssl" description for smb.conf is incorrectly defined.  It says "set ldap ssl = yes", but the code only defines "off" and "start tls" as valid options.


Here is the extract of the description:
"
 Please note that this parameter does only affect rpc methods. To enable the LDAPv3 StartTLS extended operation (RFC2830) for ads, set
       ldap ssl = yesandldap ssl ads = yes. 
"


Here is a snip of the source code.
$ grep -A1 "LDAP SSL" source3/include/smb.h
   /* LDAP SSL options */
    enum ldap_ssl_types {LDAP_SSL_OFF, LDAP_SSL_START_TLS};

Version-Release number of selected component (if applicable):
 samba_version 3.6.23

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Marc Muehlfeld 2016-07-15 06:20:36 EDT

This is also wrong in the latest Samba version's (4.4.5) man page.

Comment 4 errata-xmlrpc 2017-08-01 14:19:59 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:1950

Note You need to log in before you can comment on or make changes to this bug.